Security vs. Usability - be able to properly evaluate risk, and based on that automatically select proper step-up authetication method, but only if risk is higher than defined threshold.